`under-cover-doorframes.com`

DNSSEC	⚠️ Not signed
A	149.210.193.179^{🇳🇱 TRANSIP-AS149.210.128.0/17 TransIP BV Amsterdam, The Netherlands}
		PTR	`vps01-web.xidoor.com`
NS	`ns2.eqweb.nl` ⭐
		A	2a00:5140:53::12^{🇳🇱 EQuest-AS2a00:5140::/32 e-Quest IPv6 allocation}
		A	193.33.134.12^{🇳🇱 EQuest-AS193.33.134.0/23 E-Quest Network}
NS	`ns1.eqweb.nl`
		A	2a00:5140:53::11^{🇳🇱 EQuest-AS2a00:5140::/32 e-Quest IPv6 allocation}
			PTR	`ns1.eqweb.nl`
		A	193.33.134.11^{🇳🇱 EQuest-AS193.33.134.0/23 E-Quest Network}
MX	`xidoor.in.tmes.trendmicro.eu` ⭐
		A	18.185.115.145^{🇩🇪 Amazon18.184.0.0/15 EC2 FRA prefix}
			PTR	`in.tmes.trendmicro.eu`
		A	18.185.115.146^{🇩🇪 Amazon18.184.0.0/15 EC2 FRA prefix}
			PTR	`in.tmes.trendmicro.eu`
		A	18.185.115.147^{🇩🇪 Amazon18.184.0.0/15 EC2 FRA prefix}
			PTR	`in.tmes.trendmicro.eu`
TXT	`v=spf1 include:spf.tmes.trendmicro.com include:spf.protection.outlook.com inc...`
TXT	`MS=ms96871271`
SOA	`ns2.eqweb.nl`postmaster@eqweb.nl 2017-09-20 #49

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1777121396

Same first word

under-cover-doorframes.com

DNS History

7 records (4 active, 3 former)

●NSns1.eqweb.nl2015-08-05 → 2026-04-25 · 2 obs

● 2015-08-05 04:00:24
● 2026-04-25 13:02:50

●NSns2.eqweb.nl2015-08-05 → 2026-04-25 · 2 obs

● 2015-08-05 04:00:24
● 2026-04-25 13:02:50

○MXin.hes.trendmicro.eu2015-08-05 → 2017-09-27 · 4 obs

● 2015-08-05 04:00:24
● 2017-09-27 21:04:34
○ 2026-02-20 07:01:18
○ 2026-04-25 13:02:50

●MXxidoor.in.tmes.trendmicro.eu2026-02-20 → 2026-04-25 · 3 obs

○ 2017-09-27 21:04:34
● 2026-02-20 07:01:18
● 2026-04-25 13:02:50

●A149.210.193.1792026-02-20 → 2026-04-25 · 3 obs

○ 2017-09-27 21:04:34
● 2026-02-20 07:01:18
● 2026-04-25 13:02:50

○A193.33.134.552015-08-05 → 2017-08-16 · 4 obs

● 2015-08-05 04:00:24
● 2017-08-16 20:42:48
○ 2017-09-27 21:04:34
○ 2026-04-25 13:02:50

○A5.206.215.672017-09-27 → 2017-09-27 · 4 obs

○ 2017-08-16 20:42:48
● 2017-09-27 21:04:34
○ 2026-02-20 07:01:18
○ 2026-04-25 13:02:50

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	g.gtld-servers.net, m.gtld-servers.net, e.gtld-servers.net, c.gtld-servers.net...	-
under-cover-doorframes.com	ns1.eqweb.nl, ns2.eqweb.nl	-

✅ Authoritative Response

Server:193.33.134.11

NS records: ns1.eqweb.nl, ns2.eqweb.nl

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for under-cover-doorframes.com (unsigned zone)

⏱️ Timing

Total: 561ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`149.210.193.179`
NS	2	`ns2.eqweb.nl, ns1.eqweb.nl`
MX	1	`xidoor.in.tmes.trendmicro.eu (pri: 5)`
TXT	2	`MS=ms96871271, v=spf1 include:spf.tmes.trendmicro.com i`
SOA	1	`ns2.eqweb.nl postmaster.eqweb.nl`

Analysis

IP Addresses

under-cover-doorframes.com points to a single IP address: 149.210.193.179.

Other host names such as bodorshop.com, bodor.fr, vps01-web.xidoor.com, pietheineekdeuren.nl and pietboondeuren.nl share IPs with under-cover-doorframes.com.

Name Servers

Two name servers ns1.eqweb.nl and ns2.eqweb.nl handle the delegation for under-cover-doorframes.com.

under-cover-doorframes.com shares the same name server setup as other domains, for example 48.75.77.in-addr.arpa, nijgeertgen.de, 208.206.5.in-addr.arpa, mattenservice.nl and varidoors.com.

under-cover-doorframes.com at least partially shares name servers with other domains, for example artegroup.eu, 4007.nl, berkvens.info, artegraniet.com and berkvens.co.uk.

these name servers are commonly used alongside eqw1wv-ms002-a name servers.

Host names with two IP numbers:

ns1.eqweb.nl points to 2a00:5140:53::11 and 193.33.134.11.

ns2.eqweb.nl points to 2a00:5140:53::12 and 193.33.134.12.

Mail Servers

The xidoor.in.tmes.trendmicro.eu mail server handles under-cover-doorframes.com.

under-cover-doorframes.com shares the same mail server setup as other domains, including bodor.eu, xidoor.nl, svedex.fr, berkvens.eu and xidoor.com.

Host name xidoor.in.tmes.trendmicro.eu resolves to three IP numbers: 18.185.115.145, 18.185.115.146 and 18.185.115.147.

under-cover-doorframes.com - robtex.com